FFIEC Outsourcing Booklet
The Federal Financial Institutions Examination Council (FFIEC) is a United States interagency body that prescribes principles and standards for oversight of financial institutions by United States regulators. The Outsourcing Technology Services Booklet (FFIEC Booklet) provides guidance to assist examiners in evaluating a financial institution's risk management processes to establish, manage, and monitor IT outsourcing relationships.
The FFIEC Booklet addresses financial institutions’ responsibility to manage the risks associated with outsourced IT services, including due diligence, contract issues and ongoing monitoring.
Google Cloud’s contracts for institutions in the United States address the contractual requirements in the FFIEC Booklet. We have also created mappings to the guidance for both GCP and Google Workspace to assist you with understanding how we can support you with meeting the requirements and assess us as an outsourced service provider. Google Cloud is committed to addressing these requirements regardless of how institutions choose to use our services.